85R11614 YDB-D
 
  By: Blanco H.B. No. 2192
 
 
 
A BILL TO BE ENTITLED
 
AN ACT
  relating to comprehensive information security assessments on
  state agency information resources and network systems and digital
  data storage and security.
         BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
         SECTION 1.  Subchapter F, Chapter 2054, Government Code, is
  amended by adding Section 2054.136 to read as follows:
         Sec. 2054.136.  FIVE-YEAR AGENCY INFORMATION SECURITY
  ASSESSMENT AND REPORT. (a) At least once every five years, a state
  agency shall conduct a comprehensive information security
  assessment of the agency's information resources systems, network
  systems, digital data storage systems, digital data security
  measures, and information resources vulnerabilities.
         (b)  Not later than December 1 of the year in which a state
  agency conducts the information security assessment required under
  Subsection (a), the agency shall report the results of the study to
  the department, the governor, the lieutenant governor, and the
  speaker of the house of representatives.
         (c)  The department by rule may establish the requirements
  for the information security assessment and report required by this
  section. 
         SECTION 2.  This Act takes effect September 1, 2017.